[Snort-users] Necessary of http and other app protocol in rules header
oagvozd at gmail.com
Fri Jun 28 12:03:38 EDT 2019
Hello, What reason to use "http" procotol in rule header?
As I can see in code this App-level protocols are not processed at all -all
of them considered as TCP protocols. Only protos that are considered in
rule processing are ip,tcp,udp and icmp.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users